Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/50e713a6-7d6e-303b-9ce4-7ff00499c48a.roa
File:                     50e713a6-7d6e-303b-9ce4-7ff00499c48a.roa (raw, json)
Hash identifier:          UP/d6R7LD05eMV/2WJclVub8sCqhhh3h+bw5WkcrtUI=
Subject key identifier:   9A:57:1B:AD:3F:C4:F3:23:07:B9:E6:27:42:FB:28:AD:D7:81:BE:8E
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584912470D85001CD2A59D806000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/50e713a6-7d6e-303b-9ce4-7ff00499c48a.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     397234
IP address blocks:        2001:502:f3ff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:47:0d:85:00:1c:d2:a5:9d:80:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=3df17721-7401-4dce-a164-aa2f0c2690f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:49:9b:95:42:47:63:1a:2a:1b:15:66:9f:22:
                    0b:8b:4f:5d:ca:ff:09:33:3c:cf:26:83:58:4d:3d:
                    07:43:08:ae:73:ea:a3:ae:07:74:74:01:35:b6:28:
                    73:db:8c:96:e0:04:0f:a1:de:68:68:36:52:f1:f1:
                    06:1c:92:b3:65:5f:0d:18:04:a1:ad:2e:6e:e1:72:
                    71:4a:9b:3c:8c:e3:19:f8:42:89:37:e2:5e:f7:88:
                    a6:9e:27:83:16:f0:b7:cc:2c:da:74:12:cf:b1:f5:
                    57:13:3c:61:ac:cf:8d:d9:0a:a8:99:2b:66:84:26:
                    03:42:f5:c9:39:b4:5d:9e:51:06:7f:a5:64:bf:11:
                    35:df:74:14:0a:0a:7d:5f:c9:66:63:55:1d:0b:ec:
                    20:c6:01:fa:d3:93:6c:2a:31:9c:3b:de:44:d7:a4:
                    a3:82:c0:27:96:a1:22:80:1f:0b:8c:99:60:a2:1b:
                    e8:54:93:ab:3e:24:f0:33:5c:4f:10:f7:26:0d:4a:
                    91:b1:46:14:3b:bb:76:a4:50:4d:96:3b:7e:5b:6d:
                    7e:18:84:76:8b:e4:38:1c:ca:10:aa:27:20:5e:64:
                    29:58:70:de:ae:87:2a:b9:d3:be:7c:6f:4f:4b:17:
                    ee:3d:ae:10:be:0f:5d:a8:28:c3:89:a9:b2:fa:29:
                    9e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:57:1B:AD:3F:C4:F3:23:07:B9:E6:27:42:FB:28:AD:D7:81:BE:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/50e713a6-7d6e-303b-9ce4-7ff00499c48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:f3ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:fa:4b:74:98:55:d2:63:04:7f:42:cd:aa:96:8b:ca:e7:d1:
         19:da:69:27:b8:99:49:39:ca:fe:de:2b:b0:dd:66:03:d0:f4:
         64:74:b8:2c:1d:c6:48:fb:41:35:44:a4:4e:27:11:36:f5:b6:
         b6:88:3b:38:d7:51:b7:7f:cc:60:d0:fa:af:c8:f8:29:ad:e6:
         b0:78:44:11:df:90:53:7f:4b:46:f0:7c:8a:39:fb:5e:4d:7b:
         b6:14:92:44:99:ba:5a:a5:a1:f4:1a:54:51:a1:f2:2c:28:43:
         28:33:7c:0b:ba:86:67:ac:91:ff:8d:75:31:30:8a:8f:32:af:
         40:e2:08:5a:19:13:72:70:33:e4:3d:bd:21:55:a0:4e:6f:1b:
         67:ba:d7:67:b3:51:db:b5:2f:01:7b:85:44:b5:8c:5a:3f:9c:
         c0:2d:e3:54:01:45:a1:e5:73:3d:72:55:65:55:43:24:48:d2:
         cb:84:ae:f3:19:79:96:fa:9f:17:26:50:ea:6c:ec:b9:25:db:
         57:bc:93:8c:9f:b2:53:83:f3:06:6a:6f:66:5d:2b:9b:c7:5f:
         ff:cf:e2:2b:57:0f:68:83:8c:24:f3:1a:28:1b:22:e6:ed:4e:
         96:5e:d3:72:44:36:97:82:30:15:cc:56:47:b2:bd:29:cb:fc:
         08:b6:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:29:21 2025 by rpki-client